Description
Wifi-soft UniBox是一款用于无线网络管理的控制器软件。该软件在controller-billing-pms_check接口中存在命令注入漏洞，攻击者可通过构造恶意输入在服务器上执行任意命令。此漏洞可能导致攻击者完全控制受影响系统，建议管理员立即应用安全补丁以规避风险。
Wifi-soft UniBox /billing/pms_check.php 命令执行漏洞 （CVE-2025-6104）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-6104
https://www.cvedetails.com/cve/CVE-2025-6104/
https://github.com/advisories/GHSA-q46m-9r94-rhrw
https://nosec.org/m/share/5890.html
https://cve.imfht.com/detail/CVE-2025-6104?lang=en
https://www.cvelogic.com/cve/CVE-2025-6104
https://cert.kenet.or.ke/cve-2025-6104-wifi-soft-unibox-controller-os-command-injection-vulnerability
https://vulners.com/cve/CVE-2025-6104
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-0450.html/